CVE-2026-19391
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A flaw in insights-core causes the password redaction layer to fail to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords and Pacemaker fence device credentials to be included in cleartext in archives uploaded to console.redhat.com.
Risk Assessment
Exposure of confidential credentials in cleartext can lead to unauthorized access to systems and security breaches.
Recommendation
Update insights-core to a patched version and check if any sensitive data has already been uploaded in archives.
Original NVD description (English source)
A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included in cleartext in archives uploaded to console.redhat.com.